🛡 Setting Up SPF, DKIM & DMARC for Namecheap + Microsoft 365

Setting up SPF, DKIM, and DMARC records is essential for protecting your domain, improving deliverability, and ensuring your cold emails land in the inbox, not spam.

This guide walks you through setting up these authentication protocols for a domain purchased on Namecheap and email accounts hosted on Microsoft 365, to be used seamlessly with Coldbean.

Step 1: Connect Your Namecheap Domain to Microsoft 365

A. Access Microsoft 365 Admin

1. Log in to your Microsoft 365 Admin Center.

2. Search for “Set up your custom domain” and launch the Domain Setup Wizard.

3. Enter your Namecheap domain name and click Use this domain.

B. Verify Domain Ownership

1. Choose the verification method: “Add a TXT record to the domain’s DNS”.

2. Keep the Microsoft tab open.

Step 2: Add DNS Records in Namecheap

A. Open Namecheap DNS Settings

1. Log into your Namecheap account.

2. Go to Domain List → Manage for the correct domain.

3. Click on the Advanced DNS tab.

B. Add the Records Provided by Microsoft

1. TXT Record (for verification)

   • Host: @

   • Value: Provided by Microsoft (e.g. MS=ms########)

   • TTL: Automatic or 3600

2. MX Record (for email delivery)

   • Type: MX

   • Host: @

   • Value: Something like domain-com.mail.protection.outlook.com.

   • Priority: 0

3. CNAME Records (for various Microsoft services)

   • Microsoft will provide a list of CNAMEs to add (for Autodiscover, SIP, etc.)

4. SPF Record (TXT format)

   • Type: TXT

   • Host: @

   • Value:

     v=spf1 include:spf.protection.outlook.com -all
     

Once added, go back to Microsoft and click Verify and Continue.

Step 3: Set Up DKIM in Microsoft 365

1. Go to the Microsoft 365 Defender Portal > Email & Collaboration > Policies & Rules > Threat Policies.

2. Select DKIM > Choose your domain > Click Create DKIM Keys.

3. Microsoft will generate 2 CNAME records.

Add These in Namecheap:

• Host:

  selector1._domainkey.yourdomain.com
  selector2._domainkey.yourdomain.com
  

• Values: Provided in the Microsoft DKIM panel.

• TTL: Automatic or 3600

4. Return to Microsoft and click Enable DKIM.

Step 4: Add a DMARC Record in Namecheap

DMARC builds on SPF and DKIM, telling receiving servers how to handle unauthenticated messages.

1. Go to Advanced DNS in Namecheap.

2. Click Add New Record > TXT Record.

• Host: _dmarc

• Value (basic example):

  v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com;
  

  (Change p=none to quarantine or reject for stricter enforcement once stable.)

• TTL: 3600

Step 5: Test & Verify DNS Setup

Use any of the tools below to check that your records are working:

• MXToolbox SPF/DKIM/DMARC Check

• EasyDMARC Domain Scanner

• Microsoft 365 Admin Diagnostic Tools

Pro Tips for Coldbean Users

• Always warm up your email accounts for 2–4 weeks using Coldbean’s warmup feature before launching large campaigns.

• Set up custom tracking domains in Coldbean to improve open tracking accuracy and domain reputation.

• Maintain a separate domain just for cold outreach if possible.

Need Help?

We’re here to assist you with setup or troubleshooting.

Contact us at team@coldbean.ai
Use the in-app chat widget inside your Coldbean dashboard

Related Guides

• Set Up Custom Tracking Domain with Namecheap

• Optimize DNS for Cold Outreach with Coldbean

• Coldbean Warm-Up Setup Guide